CVE-2019-16157: Infoleak
Published Mar 13, 2020
·Updated
An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose debug commands.
Affected Software
1 affected component
Fortinet FortiWeb<=6.2.0
Event History
Mar 13, 2020
CVE Published
via MITRE·03:02 PM
Data Sourced
via MITRE·03:02 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-16157?
The severity of CVE-2019-16157 is categorized as medium, allowing authenticated users to access sensitive log information.
2
How do I fix CVE-2019-16157?
To fix CVE-2019-16157, upgrade Fortinet FortiWeb to version 6.2.1 or later.
3
What impact does CVE-2019-16157 have on Fortinet FortiWeb?
CVE-2019-16157 can lead to information exposure where authenticated users may view unrelated sensitive information.
4
Which versions of Fortinet FortiWeb are affected by CVE-2019-16157?
CVE-2019-16157 affects Fortinet FortiWeb versions up to and including 6.2.0.
5
Is authentication required to exploit CVE-2019-16157?
Yes, CVE-2019-16157 requires an authenticated user to exploit the vulnerability and view sensitive information.